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IN THE CLAIMS : 

Please substitute the following claims for the pending claims 
with the same number: 



1 12. (currently amended) A method for limiting the operational life of software in 

2 a network environment, the method comprising: 

3 providing a program applet with a password embedded 

4 therewithin to a client computer via a network , the password having a limited 

5 operational life ; 

6 receiving from said program applet via said network a request for 

7 information stored in a restricted access storage area of a server computer; 

8 automatically receiving from said program applet said embedded 

9 password without manual entry of the password by a user, for authentication^ 

10 whenever said receiving occurs : 

1 1 authenticating said embedded password by the server computer 

12 and not by the program applet , whenever said receiving occurs ; 

13 thereafter providing said information to said program applet via 

14 said network while said embedded password is valid; and 

15 invalidating said embedded password coincident with an 

16 invalidation event. 

1 13. (previously presented) A method according to claim 12 wherein said 

2 invalidating comprises invalidating said embedded password at a predetermined 

3 time. 

1 14. (previously presented) A method according to claim 12 wherein said 

2 invalidating comprises invalidating said embedded password after lapse of a 

3 predetermined time from when said request was received. 

1 15. (previously presented) A method according to claim 12 wherein said 

2 invalidating comprises invalidating said embedded password upon the detection 

3 of a loss of communication with said client. 

1 16. (canceled) 

1 17. (canceled) 
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1 18. (previously presented) A method according to claim 12 wherein said 

2 providing comprises generating said embedded password. 

1 27. (currently amended) A network-based software authentication system 

2 comprising a server computer, the server computer comprising: 

3 a password generator; 

4 password validation apparatus; 

5 a restricted-access storage area; 

6 a program applet; and 

7 invalidation apparatus; 

8 wherein said server is operative to: 

9 a) cause said password generator to generate a password , the 

10 password having a limited operational life ; 

1 1 b) embed said password within said program applet, and provide 

12 said program applet with said password embedded therewithin to a client via a 

13 network; 

14 c) receive a request for information and , whenever information 

15 requested is stored in the restricted-access storage area, automatically receive said 

16 embedded password, from said program applet via said network, for 

17 authentication, without manual entry of the password by a user; 

18 d) authenticate said embedded password using said password 

19 validation apparatus and not by said program applet , whenever information 

20 requested is stored in the restricted-access storage area ; 

21 e) provide said information to said program applet via said 

22 network while said embedded password is valid; and 

23 f) invalidate said embedded password using said invalidation 

24 apparatus coincident with an invalidation event. 

1 28. (original) A system according to claim 27 wherein said invalidation event 

2 comprises the arrival of a predetermined time. 

1 29. (previously presented) A system according to claim 27 wherein said 

2 invalidation event comprises the lapsing of a predetermined time from when said 

3 request was received. 
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1 30. (original) A system according to claim 27 wherein said invalidation event 

2 comprises the detection of a loss of communication with said client. 

1 31. (canceled) 

1 32. (canceled) 

1 33. (previously presented) A system according to claim 27 wherein said 

2 password is generated at said server computer. 
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